This is dedicated to all the hackers and the crackers
I see in binary, I speak source code
Step on my toes, I'll post a million jpegs of you in a fag pose
In your digital stance, getting firewalled ho
Cause I'm riding the net in my six-fold
I was a dick with my 56
Now with my cable, I'm able to get that stable
On the out, my name is Ace and I'm a Leo
On the digital highway, my name is Neo and I'm a Nero
In a flash, I'll screw you on burning dreamcast
You need some ISO? Let me through my hard drive rifle
Our exchange you could never stifle
In a digital hug, you just caught the love bug
I bootlegged your CD, I caused a fight between Un and Jay-Z
Your CG, it's all gonna be free
Whether we take it by force or we take it nicely
You feel that rattle in your bones?
When I tell you we just packed out Jones
And NASDAQ leaves you flat on your back
Cause I am he who loves to hack and crack
This is dedicated to the hackers and the crass
Cereal phones, source codes, ISOs, RANs, Sips, Sips
I'm back bitches! Yeah! How do you like that, huh?
It's Binary Revolution Radio, episode 171
And I'm Black Ratchet, and I will be your host for this evening
Hello! This is Savant
Yeah, it's Savant there
They can't keep me out of here
Yeah, where it's on Halloween
Yeah, I didn't actually do a nice little leeway there
Where you intro, so there was that dead air
Actually, it was the
Sweet
So, bro
Nothing wrong with dead air
Cut that little bit out or something, maybe
I don't know
Who cares?
All the listeners will demand their money back, correct?
Oh yeah, cause they pay
I mean, we're like Howard Stern
We have all these radio
We have all these people, like, transferring over to, like, our pay service
To pay every month to listen to us
It's amazing
I just bought an electric hot air balloon
Thank you
You just bought an electric hot air balloon?
Yeah, yeah, it's Lee
Oh
The wonders of eBay
Yeah, you're right
He can be like the Wizard of Oz and fly over into
Fly over into his hot air balloon
They pay no attention to the man behind the moniker
Yeah
So, yes
Well, I'm back for the evening
And it's October 31st
I don't think we mentioned that
It's Halloween
Happy Halloween
Yeah, it's crazy
Well, it actually isn't Halloween when we're recording this
But when you hear this, it will be Halloween
So, but
And we're all dressed up in our costumes
I'm dressed as Zorro
You're dressed as Zorro?
I'm dressed as a manic depressive computer applications developer
No, I'm dressed the time
Oh
I'm dressed because I can't develop any applications
Apparently
I'm like, what are you talking about?
You don't write, bro
Yeah, I code in apathy
He's emo
Yeah, emo code emo.net
I remember
I'd go as an emo coder
It'd be great
You know, just like
Write applications
And have a server message
You're like, you know
Cryptic and
Chemical Romance
Liptyx
Yeah, and the best part is
The code will be accompanied by some emo
Self-wallowing YouTube video blog post
Exactly
This is a bumper overflow
And I want to kill myself
I can't find the file specified
This is so depressing
Everything leaves me
Yeah
All right
Well, actually
The housekeeping is
Decidedly blank tonight
Because I don't have any housekeeping
This is one of those things
When you come over for an episode or two
And you have nothing to talk about
So
Would you like to go straight into email?
Yeah, let's do it
Hi, StankDog
CyberAx here
Very, very nicely
Wrote in
Cyber and Axe
So we know how to pronounce it
Just wanted to drop you a quick mail
To update you
About what's going on
Across the pond in Ireland
Me and a couple of friends
Came across Bin Rev Radio
A few months ago
And decided to bring
The good word of the revolution
To Ireland
We are currently working
To set up regular meetings
As well as a site
To coordinate the effort
In case you didn't know
You have great support
For your efforts over here
Although hackers here
Are few and far between
In my experience
Hopefully we will be able
To do our part
For the revolution
Keep up the great show
CyberAx
Wow
Ireland
Did you know there were computers
In Ireland?
Because I didn't
They have the internet in Ireland?
It's amazing
I just thought they had
Beard and sheep
Actually
To go completely on a tangent here
Apparently I was reading this article
And North Korea has no internet link
Are you serious?
Yeah
It was kind of shocking
Because apparently there's nothing
It's like they don't have
Because they're on a peninsula
And there's nothing
Apparently China says
There's nothing over there
I remember reading this article
But I really don't know
If it's actually correct or not
But it was kind of shocking
Are you speaking of
The Indymedia article
Where the guy spent some time
Over in North Korea
And documented the whole trip?
I know which one you're talking about
I actually didn't find that
From Indymedia though
Which one was that?
Was that the one that was
The guy that went on the trip
From South Korea?
Or the Russian guy?
It was the guy that went
From South Korea
And he wasn't sure
That he was going to get in
And very reluctantly
Followed all the North Korean customs
And was paying tribute
To the giant statue
Of Kim Jong's father
Dude, those giant statues
Are creepy
Yeah
Well, the whole country over there
Just kind of scares the hell out of me
Yeah, actually
There's another site that I found
That there was
It wasn't as well documented
It wasn't in English
But he took some amazing photos
Like, you know
Really high-res photos
Of just all kinds of stuff over there
And I think
Because he was from Russia
Or something
That they kind of let him
Get away with a lot more
Yeah
Is there another communist state?
I don't know
I mean
From what
He never really talked about
The tour guides
And all that stuff
That the other guy
Was talking about
So
But of course
I was reading everything
Translated
From some other person
So who knows
Probably a spy
Anyway
Back to Ireland
Yes, Ireland's cool
We're just making fun of it
I actually am
Ethnically Irish
Apparently
Yeah
It's Boston
Everyone
Right
Over here
CyberAx
We really look forward
To hearing your progress
When you get that meeting set up
And you're actually
Getting ready for it
Drop us a line
And we'll totally
Pimp your meeting out on air
I think this is our first
International BinRev meeting
Yeah, I believe
CyberAx was one of the guys
That was on the forum
Talking about getting things
Going in Ireland
And that's really cool
And thanks for writing
Into the show
I'd definitely like to
Help get that off the ground
Any way that I can
Totally
Although the one thing
I do think that's odd
Is that everyone says
Oh, you know
Hackers are few
And far between
And wherever I am
You know
Ireland
East Boston
But if you really start
Like looking for it
And turning over stones
And you know
If you're saying
Hey, you know
We're having a hacker meeting
People will start
Coming out of the woodwork
And you'll find plenty of people
You'd be surprised
So just don't think
It's going to be
You, you know
Your friend
I can't think of
Like a funny Irish name
To say
You and your couple
Other friends there
Yeah, there we go
Something with
Oh in the middle
Jack O'Connor
Jim
Jim O
Something or other
Boy, we're
Yeah, we're
Yeah
Dude, Guinness
Oh man
I wonder if they actually
That would be
That would be a meeting
I'd go to
If we could like
Have Guinness
During that meeting
Yeah, Guinness
Yeah, I'm not going to
Take ownership
For that name though
I think that's actually
An official meeting
For after the
Binary Revolution meetings
Oh
Damn
We'll have to set up
A Binary Revolution meeting
Just so we can drink
It'll be like Hope
All over again
Yeah
Totally
Well, you know
Glad to hear you're
Enjoying the show
And I really hope
You're listening
Even though that
I'm doing it right now
So
Don't stink, Doc
I don't know
That's always one of my
Big fear
Like I want to say
Like, you know
Come on
And say
Hey, you know
I'm on for the show
You know, whatever
And like
I'm just so afraid
Like everyone goes
Like, oh
Damn it
And they just
Flip the
MP3 player off
Yeah, they do
Yeah, they go
Like, oh crap
I bit off the hooks
On tonight
We're going to listen
To that
Yeah
Anyway, our next email
Is from
I actually don't really
Know how to pronounce
This guy's name
Rando
I've talked to him
A couple of times
Actually on IM
And I never actually
Know how to pronounce
His name
But I'm a few episodes
Behind
But I just listened
To episode 162
In regards to
The emailer
Talking about
The show content
And how much
The show sucks
That was one specific
Out of the phone
I thought that was
The email from all of them
Don't tell them that
We usually don't
Include those
I'd like to remind
The listener
That you guys
Do this for free
In your spare time
And this is not
Professional radio
Thank you for the show
Even the episodes
I don't like
They're still
Filled void
While I'm at work
The content
90% of the time
Is great
And hey
I know before
That I complained
But I better
Send in suggestions
First
I don't think
I read that right
Whatever
Thanks for all
What you do
And the least
I enjoy it
At the least
Sorry
At the least
I enjoy it
And I know
Others do as well
Rendingo
Boy
I'm not
Feeling my mojo
Yet on this whole
Reading the email
Thing
It'll come to you
I know
Well
Thanks for your
Comment
Rendingo
I'd hate to tell you
But I'm doing the show
Now
So we're going to
Return to our
Regular subjects
About iPods
Gen2 Linux
And asterisk
I'm just kidding
Yeah
Actually
I
Messaged not
There the other day
While I was at
Like a meeting
That I didn't
Really want to go to
And I said
Help me get out of here
I'm forming a little
Ladder out of paperclips
And he asked me
Yeah
Do your paperclips
Run Gen2 Linux
I bet they do
Knowing you
I'm just like
Wow
I guess I'm kind of
Famous for that
Are you
Yeah
Our next email
Is from Iron Geek
Hey Stanks
And go
Co-host
After watching
Wizard's PC
Presentation
At Freaknik 10
Was it Freaknik 10
Or do they call it
Freaknik X
I didn't realize
That they were up to 10
Good on them
I thought of a topic
I would love to
See you cover
On a show
Could you compare
All and contrast
The different data
Protocols that cell phones
Can use to attach
To the internet
Widen
Versus Edge
Versus 1X
Versus AVDO
Etc
I'm left with a sense
Of confusion
As what I should
Be looking for
Thanks
Iron Geek
And I gotta say
That's a bitchin' idea
Iron Geek
I'm actually
I've been using
GPRS for a while
But I'm hopefully
Picking up
On new Edge phone
On Friday
So I compare that
To Edge
What I was
The GPRS
What I was
Currently using
So who knows
And I do know
A few people
Who are
EVDO whores
Sorry
Oh pardon me
Oh excuse
Something in your throat
Yeah I've used
I've used Edge
Quite a bit
Since I've got
My new T-Mobile SDA
And I tethered
To my laptop
Quite a bit
When I'm out
At the bar
I mean
The labs
Researching
And I tend to get
About 274k
Per second
On average
Not blinding speed
But generally better
Than a crappy
Wi-Fi cafe
Internet connection
And you know
At least it provides
Some sense of security
But Edge
Or EVDO
Is definitely faster
From what I've seen
I just try not
To think about it
And wallow in the fact
That I'm stuck
With T-Mobile
And it just
Forked over $100
To upgrade to Edge
Whatever
I gotta say
Out of all
I mean
I've been really
Looking into this
Because I'm
Upgrading my contracts
Over
I'm gonna go
And get a new phone
And I was looking at
You know
EVDO
You know
It's faster
It's nice
I've seen people
Use it
Actually
I come insanely
Jealous of people
When I'm sitting
On the train
Or wherever I am
And I see them
Whip out the little
Verizon thing
And they plug it
Into their computer
And they start
Like whipping away
On it
And it's
It's pretty zippy
It's not that bad
But
I think
Like
What was it
It was
Sprint
They're EVDO
And they have
Pretty decent
You know
A pretty decent plan
For what you can
Buy for your phone
I forget how much
It costs
However
They're Sprint
And they still
Suck at least
Around here
Singular
Has Edge
And they're
Pretty pricey
And T-Mobile's
Edge
But I gotta
Say that
They have
The best price
For
You know
Unlimited
All you can
Eat
Data
I mean
Verizon
They cost
An arm
And a leg
And they have
The
That wondrous
Five gigabyte
Limit
Are you serious?
Oh you've never
Heard about this?
Five gigabyte
Limit
I can
Crap
Five gigabytes
Falls out of my
Food
And into the
Carpet
When I'm
Eating
So little
Well in
In their
EULA
They have
Or whatever
They call it
License agreement
Or
Yeah
Whatever
I don't think
It's called
A EULA
But it's
Some
Licensing
You know
Sell your soul
Type document
Where they say
You know
Unlimited
Means
Five gigabytes
And if you
Go over this
We're gonna
Yell at you
And if you
Continue to
Go over this
We'll terminate
Your account
And if you
Have to pay
Early termination
Fees
You have to
Pay those
And like
Apparently
This is like
Really big news
I'd say about
Two or three
Weeks ago
When Cringely
Covered it
And Robert
X Cringely
For those
Who aren't
In the know
He's a
I guess he
Could really say
He's like
One of the
First bloggers
Out there
He was
A columnist
For
Oh
Who was it
One of the
Like Macintosh
World or
Something like
That
And then he
Recently
When the web
Started actually
Becoming popular
He started
Posting his
Columns online
Every week
He was pretty
Cool but he
Does a column
Every week
And he
Got
An EVDO
Card
And
I mean
They say
You can't
Use it
For streaming
Data
You can't
Use it
For streaming
Video
You can't
Use it
For VoIP
And he
Doesn't use it
For any of
That
And he
Put a
Bandwidth
Meter
On his
Card
Just to monitor
All the data
Going in and out
And he
Just used it
To catch his
Email
And he
Went over
On
In a
Three day
Period
Every day
He went over
The maximum
If he
Continued
Using what
He was
Using
He'd
Definitely
Go over
The five
Gigabytes
And that
Was just
For email
He didn't
Use it
For web
Surfing
That's
Insane
Now
Out of
That five
Gigabytes
Do you know
If they
Count upload
Bandwidth
As well
Is that
Aggregate
Between up
And down
You know
That I
Don't
Know
I think
If an
Intrepid
User can
Search google
And actually
Find the
Actual
Text
I'm sure
They do
I'm sure
They're like
You know
You can't
Use your
Freezer
That's
Pretty
Draconian
It's
Stupid
And I
Mean
Verizon
You can't
Tether it
To your
Laptop
Which is
Like you
A deal
Breaker
For me
I was
Like no
I'm not
Going to
Do that
I mean
Technically
There are
Ways around
That and
There's software
You can
Download on
Your computer
Certificially
And
No it
Wouldn't
Be your
Computer
It would
Be your
Cell phone
That you
Can use
It for
But I'm
Like no
But because
Apparently
They can also
Terminate your
Contract for
That too
They're crazy
They really
Are
That's kind
Of ridiculous
Yes
Verizon
Sucks
Agreed
Let's
See
I said
Agreed
Yeah
Our
Next
Email
Is from
Polymera
Stank
Just thought
I'd like
To mention
That during
Episode 170
You kept
Referring to
The Mac
As non
Intel
Machines
You mentioned
AMD
2
I take it
You mean
X86
The only
Difference
Between an
Intel
Mac
Running a
Standard
X86
Machine
Is the
Onboard
DRM
With
Virtualization
Running
Windows
In
Parallels
Is no
Different
Than
Running
Windows
And
VMware
On
Linux
Same
Architecture
Different
Operating
System
Polymera
I'm going to
Actually say
That I haven't
Listened to
170 yet
I've been a
Bad boy
So I really
Can't comment
On what he
Said
But I
Will
Kind of
Toss
Out on
Topic
Here
A little
Bit
Of
Current
Events
And it's
TinyURL.com
Slash
Yankee6
Papa
Echo
Yankee
Hotel
And when I
Actually
Got this
TinyURL
Just to do a
Little
Side track
Here
I was
Shocked
When I
Actually
Got a
TinyURL
With six
Letters
You're
Right
Yeah
I've
Never
Seen
One
Before
Strange
Days
I wonder
What's
Actually
Going to
Happen
When
TinyURLs
Start
Becoming
So
Large
That
They're
Now
Long
URLs
Yeah
It's
Actually
Shorter
To
Just
Type
Out
The
Actual
URL
I
Know
Instead
Of
The
Actual
Short
It's
Going to
Be
Weird
I
Be
Like
Wow
Okay
I guess
TinyURLs
Aren't
Tiny
Any
Right
Anyway
The story
That was
On that
Little
Link
Is
Some
AMD
Engineer
I
Think
He
Took
The
Original
Darwin
Kernel
And
He
Hexored
It
To
Run
On
An
AMD
System
And
He
Basically
Said
Besides
DRM
This
Will
Allow
An
Apple
OS
10
Platform
To
Run
Completely
Native
On
AMD
Hardware
So
Hey
Good
For
Him
Apparently
He said
There's
Also
Ways
Of
Going
Around
The
DRM
And
There's
Some
Type
Of
Special
Kernel
Module
You
Can
Hook
In
And
Convince
That
Is
Actually
Running
on
Mac
But
That's
ALEA
Apparently
Also
On
The
Actual
EULA
I'm
Actually
Using
It
Correctly
This
Time
On
OS
10.4
It
Says
You
Need
To
Run
This
On
Mac
Hardware
You
Can't
Run
This
On
PC
Hardware
Which
Really
Blows
My
Mind
With
Any
Reasonable
Degree
Based
On
What
We've
Seen
In
The
Past
We
Should
Probably
Expect
To
See
A
Fully
Fledged
Working
Of
OSX
On
AMD
Hardware
Within
The
Next
Couple
Weeks
Well
I
Wouldn't
Be
Surprised
The
Problem
Is
That
You
Can't
Actually
Run
All
The
Cool
Bits
And
Pieces
If
You
Go
To
Subway
Into
This
Users
That
Run
A
Modified
OSX
On
Their
Systems
And
They
Keep
Up
To
Dates
Of
Like
Patches
And
Drivers
They
Use
For
Certain
Pieces
Of
Hardware
And
Apparently
I
Guess
You
Can
Run
On
My
Laptop
You
Can
Run
It
Pretty
Well
On
There
Everything
Works
With
The
Exception
Of
I
Don't
Know
Something
Doesn't
Work
On
There
I
Completely
Forget
What
It
Is
But
It's
Something
Like
Translation
From
Powerpoint
Architecture
Or
Excuse me
PowerPC
Architecture
To
X86
No
It's
A
Piece
Of
Hardware
That
Doesn't
Actually
Function
In
Your
Mac OS
10
And
I
Just
Think
They
Haven't
Written
The
Driver
This
Could
Have
Changed
I
Didn't
I
Looked
Into
It
A
About
A
Couple
Of
Months
Ago
And
Then
I
Said
Wow
That
Be
Really
Cool
Running
OS
10
On
My
Computer
Being
The
Legal
Beagle
I
Was
I
Looked
At
The
You
Know
OS
10
How
Much
It
Cost
Because
I
Was
Actually
Going
To
Buy
It
I
Wasn't
Going
To
Download
It
Off
A
Bit
Torrent
Site
Like
Other
People
I
Know
And
It
Was
Like
Oh
$150
We'll
Wait
Now
Are
You
Running
An
Intel
Based
Laptop
Yes
I'm
Running
A
Dell
Latitude
6
Something
6
10
I
Think
You
Watched
Me
At
Hope
You'll
See
That
I'm
Running
A
Dell
They
Put
That
Huge
Logo
On
The
Back
I
Always
Find
It
On
Amusing
That
You
Can
Tell
When
Dell
Actually
Played
For
Product
Placement
On
TV
When
They
Show
The
Dell
Latitude
If
You
Can
Tell
What
It
Looks
Like
When
They
Played
For
Product
Placement
Because
You
See
The Dell
Logo
On
The
Back
Or
When
They
Don't
And
They
Have
Some
Type
Of
Cute
Sticker
On
The
Back
It's
So
It's
Like
Oh
We're
Driving
My
Life
Yeah
No
Actually
I
Don't
Even
Know
What
The
Heck
It
Was
But
Like
You
Know
This
Teenage
Girl
Character
Was
Using
It
And
She
Had
This
Like
You
Know
Really
Stupid
flower
Sticker
On
The
Back
I
Was
Like
Oh
Geez
Isn't
That
Conveniently
Placed
Yeah
Hmm
Actually
They
Usually
Really
Bad
When
Macs
First
Came
Out
And
Everyone
Was
Using
A
Mac
In
Hollywood
And
You
See
The
Stickers
Right
On
The
Back
And
You
Can
Tell
They're
Running
A
MacBook
Because
They're
Very
Uniquely
Shaped
And
How
They
Look
But
Oh
What
You're
Going
To
Do
Why
No
Geez
Our
Next
Email
From
This
Noob
Oh
Yeah
That
Idiot
Why
Don't
You
Go
A
Read
That
One
I
Don't
Even
Want
To
Think
About
That
Guy
Oh
God
Hey
Thank
And
Not
Theory
I'm
Listening
To
Your
Episode
On
Virtualization
And
I
Figured
It's
Worth
Mentioning
Some
Malware
Now
Checks
To
See
If
It's
Being
Run
On
VMware
I
Believe
The
Check
Is
Looking
For
Debugging
Processes
Regardless
It
Checks
To
See
If
It's
Running
In
A
Virtual
Environment
And
If
It
Is
Refuses
To
Work
It
Was
The
Exact
Reason
That
Truman
The
Reusable
Unknown
Malware
Analysis
Net
Was
Created
I
Highly
Recommend
The
Listeners
In
Interested
In
Malware
Reversing
Check
This
Out
It
Gave
A
URL
And
I
Tired
URL
It
HEDV
.com
Tiny
URL
Dot
Com
N
7
EDV
November
7
Echo
Delta
Victor
I
Really
Just
Said
HTP
Dot
Com
Back
There
But
You
Know
Whatever
We'll
Just
We'll
Just
Ignore
That
Anyway
So
Who's
This
Email
From
Some
Noob
Named
Sivan
Oh
Yeah
That guy
Doesn't
Have
A clue
What
A
Noob
What
That
Truman
Stuff
Who
Names
Your
Stuff
Truman
Too
I
Bet
He
Had
A
Hand
In
That
You
I
Don't
Think
He
Did
Actually
I
Think
He
Was
Just
With
Everybody
Else
When
Joe
Stewart
Busted
It
Out
And
Was
Equally
Impressed
All
Right
Well
This
Is
Actually
A
Very
Handy
Segway
Because
We'll
Talk
About
Truman
Later
Because
Our
Episode
Tonight
Is
Malware
And
All
The
Nasty
Bits
Of
Pieces
It
Will
Contain
And
All
The
Stuff
It
Can
Do
And
It
Will
Kill
Your
Family
And
Attack
Your
Pets
And
Do
All
Kind
Of
Horrible
Things
So
We'll
Cover
Truman
Later
But
We
Tossed
That
URL
Up
There
So
You
Can
Go
Take
A look
At
It
While
We
Talk
About
Personal
Hacking
Stories
Would
You
Like
To
Go
First
The
Show
Notes
Have
You
First
And
I
Don't
Like
To
Slim
Up
The
Stream
I
Always
Post
Myself
First
I
Don't
Why
Because
I
There
And
I
Know
Exactly
What
I
Think
Yeah
I
Go
Ahead
Right
Now
I'm
Finally
Getting
Off
My
Ass
And
Modifying
My
First
Generation
Xbox
Using
Some
Software
Mods
Instead
Of
Actually
Having
To
Deal
With
Solder
Chips
Or
Putting
Hardware
In
There
I'm
Really
Just
Trying
To
Make
A
Media
PC
And
Since
The
Xbox
Is
Like
50
To
Use
Now
I
Figured
Now
Is
A
Good
Time
And
Up
Until
Recently
It's
Just
Been
Sitting
100
Pound
Paperweight
In
My
Living
Room
And
Finally
Managed
To
Hook
It
Up
To
An
ATA
And
Get
It
Talking
To
Asterisk
And
Figured
Out
That
If
I
Dialed
911
Then
It
Wouldn't
Ask
Me
For
Money
And
It
Would
Place
The
Call
Through
The
ATA
And
From
There
Asterisk
Rerrouted
It
To
My
Menu
And
Now
I
Got
A
Working
Pay
Phones
So
That's
Kind
Of
Cool
And
Yeah
So
Wait
You
Dial
911
And
You
Hit
To
Your
Main
Menu
I
Really
Hope
You
Don't
Fall
Down
And
You
Have
A
Guest
Over
And
They're
Like
Oh
Crap
I
Need
To
Call
911
And
They'll
Run
To
The
Well
They
Won't
Know
Man
Your
Mom
Is
Over
There
And
She's
Like
Oh
Well
It's
A
Phone
I'll
Go
Hello
Welcome
To
Savant
PBX
People
Will
Come
In
Come
Into
My
House
And
They'll
See
It
There
And
They'll
Go
Sweet
Pay
Phone
And
They'll
Lift
It
Up
And
They're
Like
Does
It
Work
I'm
Like
Yeah
I don't
Make
It
Work
Dial
911
Screw
You
I'm
Not
Dial
911
No
I'm
Not
Going
To
Do
It
It's
Been
Pretty
Humorous
A
Couple
Times
And
The
Last
Thing
I'm
Working
On
And
I'd
Like
To
Send
A
Hearty
Binary
Revolution
Welcome
And
I'm
Kind
Of
A
Ping
I'm
Working
On
A book
With
Singers
Publishing
About
Hacking
Asterisk
And
Using
The
Asterisk
Telephone
System
As
A
Hacker
Tool
Or
Doing
Things
That
Are
Kind
Of
Shady
You
Wouldn't
Find
In
A
Normal
Asterisk
This
Is
Telephony
101
Type
Book
And
So
If
Any
Of
You
Listeners
Out
Asterisk
Machine
Out
Of
The
Ordinary
Maybe
It's
To
Feed
Your
Goldfish
While
You're
On
The
Road
Then
Send
Me
An
Email
Savant
At
Feartubes
Dot
Com
And
I'd
Love
To
Hear
Your
Stories
And
If
Possible
I'd
Like
To
Work
Them
Into
The
Book
And
Of
Everyone
Who
Submits
And
I
Think
It
Would
Be
A
Great
Opportunity
So
That's
Savant
At
Feartubes
Dot
Com
F
Of
Ted
Stephens
The
Internet
Is
Tubes
Yes
So
If
You
Ever
Want
To
Get
Scared
You
Know
Just
Go
To
Fear
Tubes
Well
One
Stank
And
I
Did
The
Phishing
Episode
One
Of
The
Emails
I
Forget
The
User
I
Apologize
If
You're
Listening
Right
Now
And
I
Don't
Remember
Your
Name
But
You
Responded
Fear
Any
Period
Anyways
Period
And
Was
Talking
About
The
Senator
And
The
Whole
Sentence
Was
The
Word
Fear
Tubes
And
I
Was
Cracking
Up
Over
It
And
I
Bought
The
Domain
That
Instant
So
Love
It
He
Was
Just
Like
Yeah
I
Need
To
Buy
That
So
That
Person
Sent
Your
Email
It
Was
Your
Idea
So
You
Better
Contact
Them
And
Say
Dude
I
Want
Royalties
For
Every
Email
You
Send
I
Will
Happily
Hook
Him
Up
With
A
Fear
Tubes
Email
Address
Let's
See
What
Have
I
Been
Doing
Like
I
Said
I
I'm
Looking
For
A
New
Phone
And
I'm
Getting
Edged
So
I
Think
I'm
Picking
Up
A
T-Mobile
MDA
Otherwise
Known
As
A
Q
Tech
Wizard
On
Friday
I
Hope
I'm
Hoping
I
Really
Want
One
And
I'm
Sick
And
Tired
I
Had
A
Sidekick
Too
For
A
While
Originally
Lost
By
Me
And
Someone
Picked
It
Up
And
Refused
To
Return
It
So
That
Sucked
And
So
You
Know
I
Been
Working
On
My
Sidekick
One
For
Like
You
Know
The
Past
Ten
Months
Or
So
Probably
Less
Than
That
At
Eight
Months
So
And
About
Six
Of
Those
Eight
Months
I
Haven't
Had
A
Backlight
So
I'm
Really
Looking
Forward
To
This
Phone
Which
Really
Sucks
Right
Now
Especially
When
Daylight
Savings
Kicks
In
And
I
Been
Driving
Home
In
The
Night
And
I
Can't
See
Anything
And
I
Like
I
Hear
The
Phone
Ring
I'm
Like
Damn it
Who
The
Hell
Is
Calling
Me
I
Can't
Tell
Hello
It's
Someone
You
Don't
Want
To
It
Acting
Like
It's
1990
Yeah
I'm
Going
To
Send
Out
A
Public
Apology
Yapple
My
Baby
Is
A
Smoking
Pile
Of
Ruin
Right
Now
It
Works
But
There
Was
Some
Issues
With
It
And
I
Think
The
Database
Finally
It
Outgrew
Its
Database
And
The
Way
I
Designed
It
So
Certain
Features
Aren't
Working
And
Certain
Features
Are
Working
But
Not
Correctly
So
I
In
My
Copious
Amount
Of
Free
Time
I
I'm
Going
To
And
If
You
Submitted
A
Phone
And
You're
New
And
It's
Sitting
In
The
Moderation
Queue
I
Should
Really
Sit
Down
And
Just
Go
Through
All
Those
And
Make
Sure
They're
All
Correct
And
Actually
I
Did
Have
A
Very
Interesting
Hacking
Story
Last
Night
WBZ
My
Local
24
Hour
News
Station
I
Do
Like
To
Listen
To
It
And
They
Recently
Gone
To
Streaming
Online
Hey
You
We're
Streaming
Go
To
Our
Website
And
I
Was
Like
Oh
That's
Cool
And
I
Go
To
Their
Website
And
I
Figured
They're
Going
To
Send
Me
A
Link
To
Some
Media
Player
Or
You
Know
On
The
Off
Chance
An
MP3
Site
And
I
Open
It
Up
And
They
Want
All
My
Docs
So
I'm
Like
Oh
Yes
I
Am
JR
Loser
At
Example.net
Go
Ahead
And
Send
An
Email
Go
Right
Ahead
And
I
Click
The
Link
And
I
Think
Windows
Media
Player
MP3
Is
Going
To
Pop
Up
And
Nothing
It's
This
Little
Internal
Media
Player
And
I'm
Like
What
The
Hell
Is
This
And
I
Have
To
Keep
The
Website
Open
While
It's
Working
Or
It
Stops
Doing
Everything
I
Got
Very
Angry
At
This
So
Last
Night
I
Wanted
To
Listen
To
Something
That
They
Were
Playing
And
I
Sat
Down
And
I
Fired
Up
Wireshark
And
Went
To
Their
Website
And
I
Stiffed
The
Entire
Session
And
I
Found
Out
That
It
Is
Media
Player
It
Goes
To
A
Link
And
It
Grabs
It
And
Starts
Streaming
It
Internally
So
I
Now
Have
That
Link
And
Now
I
Can
Open
It
Up
In
Media
Player
Anytime
I
Want
To
Without
Having
To
Listen
To
Their
Stupid
Commercials
In
The
Forefront
And
Watch
Their
Banner
Ads
Reload
Every
Couple
Of
Minutes
Since
You
Mentioned
That
I
Actually
Have
A
Hacking
Story
That
I
Didn't
Really
Remember
That
I
Had
In
Regards
To
Rapid
Share
If
You
Have
Used
Rapid
Share
It
Allows
You
To
Upload
Whatever
File
You
Want
And
If
You
Are
Not
A
Member
They
Make
You
Wait
30
Second
Before
You
Can
Download
The
Link
And
If
You
Reset
That
Page
Then
The
Timer
Resets
Which
Means
That
It's
Client
Side
The
JavaScript
That
They're
Using
To
Sort
Of
Cripple
You
To
Be
To
Download
That
Link
But
If
You
View
The
Source
The
Page
And
Scroll
All
The
Way
Down
You'll
See
A
Three
Mile
Long
E-roll
Encoded
Nonsensical
Stream
That
If
You
Type
Your
Favorite
CGI
Decoder
It
Gives
You
The
Whole
URL
Of
The
Actual
File
So
It's
Relatively
Easy
To
Script
Up
Something
That
Will
Just
Search
For
That
String
So
If
You
Put
In
A
Rapid
Search
URL
It'll
Just
Spit
Out
And
Automatically
W-get
The
Proper
Link
Without
Having
To
Wait
A
Minute
Or
However
Long
It
Is
So
Budding
Entrepreneur
Coders
Might
Want
To
Look
Into
Whipping
Something
Like
That
And
I'll
See
If
I
Can
Get
A
Proof
Of
Concept
Up
By
The
End
Of
The
Week
So
You
Actually
Have
Free
Time
You
Can
Do
That
It's
Pretty
Cool
I
Don't
Know
About
All
That
I
Just
Have
Time
Where
I
Disregard
My
Other
Applications
But
Yeah
I
Know
I
Should
Be
Making
Money
And
Pairing
Booze
But
Damn
Rapid
Share
You
Know
So
Want
To
Download
His
Prawn
At
Rapid
Speeds
Yeah
I
Don't
Have
Time
To
When
He
Wants
His
Prawn
He
Wants
It
Now
All
Prawn
On
Demand
Anyway
Alright
So
Our
Main
Topic
This
Evening
Is
Malware
The
Scary
Subject
It's
Halloween
Yeah
Spooky
Oh
Um
Okay
So
I
Think
Before
We
Actually
Start
Getting
Into
Nitty
Gritty
As
Always
We
Should
Have
A
Little
You
Know
What
Malware
Is
And
All
This
Stuff
And
Have
A
Little
Background
And
Malware
Is
Just
More
Of
A
I
Get
The
Way
I
Always
Sort
Of
Explain
It
When
I
Have
To
Explain
It
To
A
Person
Who's
Not
Clued
In
Is
More
Of
A
General
Type
Viruses
And
Other
Nasty
Bits
Of
Software
People
Can
Install
On
Your
Computer
Is
That
Right
In
Your
Yeah
I've
Got
I've
Got
A
Wiki
Definition
Sitting
Here
In
Front
Of
Me
So
Let's
Just
Go
To
That
Real
Fast
Malware
Is
A
Software
Designed
To
Infiltrate
Or
Damage
A
Computer
System
Without
The
Owners
Informed
Consent
It
Is
A
Blend
The
Words
Malicious
And
Software
The
Expression
Is
General
Term
Used
By
Computer
Professionals
To
Mean
A
Variety
Of
It's
A
Lot
More
Official
Sounding
Than
Well
It's
All
Kinds
Of
Stuff
To
Install
On
Your
Shit
Yeah
I
Don't
Think
Work
Would
Like
Tell
Yeah
Oh
You
Got
Malware
That
Fuck
That
That's
A
Clinical
Term
Your
Shit
Is
Fucked
Just
Like
To
Give
Shouts
Out
To
The
People
Listening
In
The
Cab
Hello
Tip
Well
Oh
Yeah
The
Cab
People
I
Remember
That
I
Actually
Listened
To
That
Episode
Gotta
Like
The
People
Out
Cab
Hello
Hey
You
Should
Close
Your
Legs
Back
There
I
Can
See
The
Goods
Oh
Man
This
Is
Almost
As
Fun
As
Owning
McDonald's
Drive
Thrus
I
Need
To
Get
One
Of
Those
Well
There
Was
A
Lot
Of
Early
Infectious
Programs
Back
In
The
Day
I
Think
The
First
Real
Like
You
Know
Big
One
Was
The
Internet
Worm
And
I
Think
That
Was
Like
1987
Was
It
Yeah
It
Was
Late
80s
Early
90s
The
Robert
T.
Morris
Worm
Was
This
Worm
That
Essentially
He
Wanted
To
Make
A
Program
That
Would
Never
Die
Out
On
The
Internet
And
It
Would
Just
Constantly
Have
A
Police
That
Would
Be
Running
on
And
It
Was
It
Was
Self
Propagating
Unfortunately
He
Wrote
It
He
Didn't
Understand
How
Fast
Everything
Would
Be
Compromised
And
This
One
Program
Took
Down
The
Internet
The
Whole
Internet
Like
Yeah
Like
Exactly
What
The
Russians
Couldn't
Do
This
Worm
Did
That
Is
Exactly
What
The
Problem
Was
All
These
Hosts
Were
1988
Oh
I
Guess
It
Was
Pretty
Close
Considering
That
I
Had
No
Flipping
Clue
What
The
Internet
Was
Back
Then
That
Was
Seven
Years
Old
Not
Even
Seven
Years
Old
There
About
Anyway
And
Like
It
Was
And
It
Was
It
Was
Like
The
First
Real
Thing
Of
Demonstrating
What
A
Virus
Was
And
What
It
Could
Actually
Accomplish
It
Is
Actually
A
Very
Interesting
Read
To
Find
Out
How
The
Entire
Thing
Went
Down
And
What
Exactly
Happened
And
How
People
Responded
So
Fire
Up
Wikipedia
Go
Head
Over
There
But
We're
Not
Covering
It
This
Episode
There
Was
Also
Back
In
The
Boot
Floppy
Viruses
For
MS
DOS
Do
You
Would
Actually
Have
To
Worry
About
Your
Computer
Not
Rebooting
If
You
Ran
One
Of
These
Back
In
The
Day
Yeah
There
Was
Actually
Stuff
And
It
Would
Basically
Be
If
You
Fired
Up
It
Was
Common
Enough
In
DOS
And
I
Believe
Actually
Macintosh
Had
One
Like
That
Where
It
Was
You
Pop
A
Computer
In
You
Access
A
File
Into
The
Floppy
And
It
Would
Copy
Itself
Up
To
That
Computer
And
I
Mean
When
I
Think
About
It
Now
Like
How
Common
Viruses
Were
And
How
Everything
Comes
Out
Over
The
Network
That
Was
A
Very
It
Just
Seems
So
Amazing
To
Me
Like
How
Viruses
Propagated
Back
Then
And
Actually
What
Was
It
I
Think
It
Was
Called
W
Def
On
Macintosh
Where
Basically
If
You
Had
Infected
Floppy
If
You
Popped
It
Into
The
System
You
Were
Infected
Because
It
Would
Access
The
System
Automatically
Or
The
System
Would
Access
The
Floppy
Disc
Automatically
So
You
Hear
That
Max
Zealus
You
Are
Not
Well
Actually
If
You
Upgraded
Six
And
Seven
They
Changed
That
Because
It
Was
Essentially
It
Ripped
Its
Way
Through
The
Macintosh
World
Hey
Man
I
Don't
Give
Any
Opportunity
To
Poke
Real
Fun
Into
The
Mac
So
You
Know
Let
Me
Run
With
This
All
Right
All
Right
God
Damn
Max
Yeah
Get
Off
My
Lawn
Okay
Well
And
Basically
I'm
Just
Trying
To
Anticipate
More
Hate
Males
Since
Episode
170
Didn't
Get
Any
Email
Whatsoever
Sometimes
You
Gotta
Throw
A
Rock
Through
Window
So
Like
You
Know
It
Was
Basically
Well
It
Was
Basically
All
Just
Floppy
Disc
For
A
While
And
Then
1999
I
Distinctly
Remember
Sitting
There
In
My
Computer
Science
Class
And
The
Professor
Started
Talking
To
Us
About
The
Melissa
Virus
Which
Apparently
Just
Made
The
Big
Splash
That
Day
Like
Right
Before
The
Class
Like
People
Absolutely
Started
Getting
Hammered
By
It
And
That
Was
Like
Beyond
Like
I
Mean
Technically
The
Morris
Worm
Was
Like
Big
Back
In
The
Day
But
This
Just
Absolutely
Made
It
Pale
In
Comparison
With
The
Melissa
Virus
It
Was
Just
Melissa
Everyone
Got
And
If
You
Don't
Remember
It
At
All
What
Was
The
Melissa
I
Forget
The
Text
Of
The
Email
It
Wasn't
The
Love
Bug
Which
Sent
Exactly
I
Don't
Think
I
Got
Either
Of
Them
Which
Like
Made
Me
Feel
Like
Very
Sad
Nobody
Loves
You
Yeah
I
Know
Nobody
Loves
Me
And
Nobody
Like
Wants
To
Give
Me
A
Viruses
Um
It
Was
It
Was
Like
A
Word
Document
Or
Something
Actually
Yes
Saban
Just
Pased
Me
The
Link
It
Was
A
Word
Document
And
Um
Essentially
It
Grabs
People's
Triple
It
Grabs
People's
Password
For
Naughty
Sites
Well
Good
For
Them
And
See
It
Still
Doesn't
Actually
Say
The
What
The
Text
Was
I
Forget
I
Forget
What
It
Was
It
Was
It
Said
Something
That
Made
People
Want
To
Open
This
Word
Document
But
Anyway
Um
And
Then
Like
In
2001
Code
Red
Came
Out
And
I
Think
We're
Really
Kind
Of
Approaching
The
Point
Where
People
Would
Actually
Understand
What
We're
Talking
About
Code
Red
Was
A
Propagated
Via
A
IIS
Exploit
Internet
Information
Server
And
I
When did
It
Happen
It
Was
Like
In
July
Or
So
And
Essentially
What
It
Was
Is
If
You
Got
Infected
By
It
Your
Website
Got
Defaced
And
Had
A
Big
Red
Background
With
Yellow
Letters
Saying
Hacked
By
Chinese
And
It
Actually
Had
A
Secondary
Payload
And
The
Reason
Why
It
Was
Called
Code
Red
Which
I
Always
Found
It
Amusing
The
I
Forget
Who
Actually
Researched
I
Think
It
Was
ISS
And
They
Basically
Did
A
Marathon
Session
Trying
To
Reverse
Engineer
And
Find
Out
What
The
Problem
Was
And
They
All
Drunk
Mountain
Code
Red
Mountain
Dew
Which
Was
Brand
New
At
That
Point
And
Wait
You
Didn't
EI
Digital
Security
Were
The
People
Who
Did
The
Expensive
Reverse
That
Got
The
Name
From
Drink
Oh
Okay
Yes
It
Was
Like
And
That
That's
Why
They
Called
Code
Red
And
Actually
I
Believe
Code
Red
Like
On
A
Certain
Day
It
Would
Do
A
It
Was
Supposed
To
Denial
Service
The
White
House
Website
But
The
Coders
Coded
It
As
It
Would
Denial
Service
An
IP
Address
So
Nothing
Happened
And
Then
You
Know
Everything
Actually
Started
To
Becoming
A
Lot
More
Prevalent
With
Broadband
Coming
Out
And
You
Know
Now
God
Botnets
And
Zombied
Computers
And
What
Is
It
God
I
Can't
Remember
All
The
Viruses
My
Doom
Sasser
All
Those
Are
Like
You
Crazy
Worms
And
Viruses
And
Now
With
Like
You
Especially
What
Would
You
Say
Like
You
Know
Spyware
Actually
Started
Take
Off
With
Spyware
Also
Malware
I
Mean
We
Are
Really
Kind
Of
Concentrating
On
Viruses
So
Around
2000
Thereabouts
You
Get
Spyware
And
The
Most
Obnoxious
Thing
You
Really
Had
To
Worry
About
Was
Bondi
Buddy
Or
Just
General
Statistics
Reporting
Malware
That
Basically
Was
Just
Traffic
Generation
Type
Stuff
Or
Traffic
Monitoring
Figuring
Out
Marketing
Information
And
Then
Sometime
Shortly
There
After
That
Some
Organized
Criminals
Thought
Well
Hey
If it's
Working
For
Legitimate
Purposes
Why
Not
Make
It
Capture
Passwords
Or
Capture
Forms
Or
Just
Docs
In
General
And
So
I
Want
To
Put
That
Around
You
Know
Late
2000
Early
2001
Someone
Who
Is
More
Knowledgeable
Might
Be
To
Correct
Me
On
That
But
I
Feel
That
That's
Right
About
Time
So
Within
The
Past
Years
That
Sounds
About
Right
Too
Yeah
It
Was
Definitely
Post
2000
I
Actually
Might
Say
It's
Later
Maybe
I
Actually
Really
Started
Noticing
Spyware
Taking
Off
Right
Around
2001
2000
Yeah
I
Was
Definitely
Out of
High
School
That's
What
Yeah
Definitely
When I
Was
Saying
Wow
Crap
People
Are
Actually
There
Was
A
Market
To
Clean
This
Stuff
Up
I
Said
Oh
Yeah
Sure
I
Fix
Your
Well
Normally
I
Charge
I
Charge
More
With
That
And
That
Way
I
Can
Get
Multiple
Factor
Beers
Multiple
$50
Bills
But
Anyway
You
Mean
Money
Can
Buy
Beer
Anyway
This
Leads
Up
Yeah
It's
Amazing
Anyway
That
Sort
Of
Brings
Us
Up
To
Today
And
That
That's
Sort
Of
The
History
Of
Spyware
Malware
Viruses
Worms
And
All
That
Wonderful
Stuff
So
Yeah
I
Mean
As
Savan
Just
Sort
Of
Mentioned
The
Main
Features
Of
Spyware
Today
Are
Twofold
I
Mean
You
Have
Like
The
Crazy
You
Know
You
See
A lot
Of
The
Stuff
Of
Like
You
Know
Legit
Spyware
That
They're
Trying
To
Install
Like
Oh
Crap
What
Was
It
Wasn't
Second
Life
It
Was
Some
Online
Role
Playing
Game
That
Was
Tried
To
Install
Spyware
And
See
What
Websites
You
Were
Going
To
And
Display
In
Game
Ads
Of
Seeing
What
You
Were
Going
To
Stuff
You
May
Be
Interested
In
It
Actually
It
Was
A
Very
Interesting
Idea
But
I
Think
Everyone
Freaked
Out
On
It
And
That
Was
Going
Back
To
Usage
Tracking
And
Where
You
Were
Going
To
And
Then
There's
Everything
Else
Which
Is
Stealing
All
The
Other
Mer
Was
Stealing
Passwords
And
Setting
Up
Bot
Nets
Another
Good
Example
Would
Be
The
Sony
DRM
That
They
Were
Packaging
For
A
While
That
Had
The
Malware
Embedded
In
If
You
Put
The
CD
In
Your
Windows
Machine
That
Over
Installed
Their
DRM
Software
Which
Would
Hose
Any
MP3
Collection
That
You
Had
That
It
Didn't
Believe
Was
Signed
Or
Authentic
Didn't
They
I
Think
They
Prompted
You
For
That
Didn't
They
Said
Oh
We
Need
To
Install
This
To
Run
The
CD
And
You're
Like
Oh
Okay
And
What
They
Didn't
Say
Is
They're
Essentially
Installing
A
Root
Kit
On
Your
System
Yeah
Exactly
I
Mean
I
Don't
Pay
For
Music
I
Don't
Listen
To
Music
I
Just
Hack
So
Radio
Streams
Yeah
How
About
That
Huh
Exactly
Yeah
Yes
Put
Your
Let's
Talk
About
The
In
Corpse
Spyware
All
Right
Yeah
Let's
Talk
About
Corpse
Spyware
I
Believe
The
Site
Is
Well
It's
Not
Corpse
Dot
Net
Although
If
You
Go
To
Corpse
Dot
Net
It
Displays
The
Text
Collect
Some
Stars
To
Shine
For
You
And
That's
It
There's
No
Website
There
It's
Just
A
Phrase
Collect
Some
Stars
To
Shine
For
You
So
That
Could
Be
Something
Dubious
I
Have
No
Idea
Let's
Try
Corpse
Spyware
Dot
Net
Anyways
Corpse
Is
A
Gentleman
From
The
Products
Team
Out
Of
Russia
And
What
Actually
Let's
Reface
This
With
If
You're
On
A
Windows
Box
It
Would
Be
Smart
For
You
Not
To
Go
To
This
Website
Yeah
It's
Better
Than
Good
Chance
That
This
Guy
Is
Obviously
A
Master
Of
Exploits
And
Root
Kits
And
Things
Of
Do
Whatever
You
Have
To
Do
I'm
Not
Making
Any
Guarantees
Towards
The
Safety
If
You
Get
Pwned
Don't
Blame
Me
Alright
That
Said
The
Corpse
Creates
These
Little
You
Remember
The
Old
Virus
Creation
Labs
Back
In
The
Day
You
Know
Oh
Totally
It's
Along
Those
Lines
Corpse
Creates
Customized
Spyware
That
Will
Say
If
You're
A
Fisher
And
You're
Targeting
Specifically
Bank
America
Then
Corpse
Will
Create
A
Version
Of
His
A311
Death
Spyware
That
Will
Specifically
Search
For
Passwords
For
Bank
Of
America
Or
Will
Perhaps
Inject
An
I
Frame
Into
The
Legitimate
Bank
Of
America
Site
So
When
People
Log
In
It
Automatically
Redirects
Them
To
The
I
Frame
And
They
Get
Phished
That
Way
So
He's
Getting
A
Little
Clever
About
This
But
What's
Unique
About
A311
Is
It's
Taking
Suspicion
That
Corbs
Is
Actually
An
American
Who
Is
Creating
The
Software
Here
In
The
States
And
Then
Selling
It
Overseas
In
Russia
It's
Not
Illegal
To
Write
Spyware
Here
It's
Illegal
To
Sell
It
Or
To
Use
It
But
He's
Getting
Around
That
Using
International
Laws
So
You
Can't
Sell
Spyware
In
The
United
States
It's
A
Very
Great
Area
If
You're
Trying
To
Sell
Software
That
Basically
Goes
Out
And
Hacks
Someone's
Computer
And
Steals
All
Their
Stuff
Then
No
It's
Pretty
Illegal
But
This
You know
I mean
This
Guy's
Obviously
Not
Worried
About
The
Criminal
Repercussions
Of
His
Action
I
Can
Imagine
That
Yeah
Another
One
He's
Got
Is
A
Similar
Program
Called
Nuclear
Grabber
Now
You
Can
Buy
These
Off
The
Website
For
Anywhere
From
200
US
Dollars
For
The
Simple
Form
Grabber
To
400
For
The
Advanced
Form
Grabber
To
500
For
The
Simple
Plus
SOX
And
HTTP
And
An
Admin
Web
Interface
Panel
For
The
Spyware
So
It's
Really
Interesting
That
They've
Got
These
Hired
Guns
So
Wait
I can
Buy
Spyware
And
Have
A
Simple
C
Panel
Type
Interface
For
Their
Spyware
They're
Taking
Any
Sort
Of
Technical
Knowledge
Out
Of
Running
And
Infecting
Users
And
Optimizing
It
For
The
OC
Or
Excuse
Me
Organized
Crime
Or
Just
General
People
Who
Are
Looking
To
Maybe
Even
The
Market
For
Jealous
Ex-husbands
Or
What
Have
You
But
I
Mean
Anytime
You
Want
To
Be
Able
To
Pwn
Someone's
Box
This
Is
A
Pretty
Easy
Way
To
Go
About
It
Of
Course
Like
Anytime
You're
Running
A
Trojan
Or
A
Remote
Access
System
You
Have
To
Know
That
There's
A
Better
Than
Good
Chance
That
By
Running
The
Control
Panel
Element
Of
It
You're
Probably
Getting
Owned
By
A
Backdoor
And
Corpse
Probably
Still
Has
Access
To
Your
System
So
Once
Again
Part
Is
That
Is
That
I
Mean
The
Way
You're
Kind
Of
Saying
That
Is
That
Kind
Of
Common
Where
If
You
Have
A
Simple
Web
Interface
A
Lot
Of
Time
The
Developer
Will
Insert
Some
Type
Of
Way
That
He
Can
Control
All
Your
Stuff
And
He
Knows
What
You're
Doing
Yeah
I'd
Be
A
Little
Bit
More
Skeptical
About
The
Web
The
Web
Interface
Version
Of
It
Because
There's
Binary
Versions
Of
The
Command
And
Control
Center
For
This
Malware
So
Yeah
Just
Be
Careful
I'm
Pretty
Sure
That
Most
Of
Our
Listeners
Are
On
The
Up
And
Aren't
Really
About
To
Drop
$500
Just
To
Own
Somebody
Because
There's
Cheaper
Faster
And
I haven't
Seen
It
Yet
But
I
Mean
Maybe
It's
On
Today
Halloween
Every
Time
We
Should
Mention
Halloween
I
Need
To
Find
Like
A
Thunder
Crashing
In
The
Background
Right
Exactly
What
Song
Is
That
Actually
We'll
Talk
About
That
Later
Okay
Cool
Very
Cool
Now
I
Remember
What
That
Song
Is
Yeah
Okay
Let's
See
So
I
Feel
As
If
There
Should
Be
More
Detailed
Information
To
Go
Through
About
Corpse
A311
It's
An
Older
Exploit
I
Don't
Know
That
It's
The
Variations
The
Way
That
Corpse
Writes
It
I
Believe
That
The
Variants
Are
Very
Hard
To
Detect
With
Traditional
Antivirus
Signatures
Because
It
Is
A
Customed
Version
Of
The
Program
The
Heuristics
Aren't
Necessarily
Always
There
And
Packer
Or
A
Specific
Hext
In
The
Package
Traffic
It's
Not
Necessarily
Going
To
Be
There
With
Customed
Applications
So
If
You
Pissed
Off
Somebody
To
The
Extent
Where
They're
Going
To
Drop
Half
A
Grand
On
Owning
You
Then
There's
A
Very
Good
Chance
That
You're
Not
Going
To
Know
About
It
So
Essentially
What
You're
Saying
Is
There's
Really
No
Protection
For
This
Kind
Of
Because
The
Customized
Nature
Of
It
Boy
Someone
Just
Tell
Semantic
Yeah
Definitely
Oh
Our
Virus
And
Stuff
Is
Like
X
Is
Everything
Well
No
Not
Really
Not
Really
I
Mean
You
Don't
Catch
All
The
Major
Stuff
All
The
Stuff
That's
Just
Designed
For
Maximum
Penetration
Versus
A
Targeted
Penetration
Maximum
Penetration
Sounds
Like an
Arnold Schwarzenegger
Movie
That
Sounds
Like a
Porn
Star
Name
If
I
Max
Penetration
I'll
Be
Your
Waiter
Tonight
So
That's
Pretty
Much
It
For
H311
There's
Definitely
What
Else
Is
Out
There
I
Guess
This
Is
Kind
Of
A
Lubrative
Market
So
Is
There
Other
Major
Spyware
Brands
Out
There
They
All
Tend
To
Follow
The
Same
Modus
Operandi
Of
Give
The
Buyer
As
Many
Features
Over
The
Victims
Computer
As
Possible
One
Really
Interesting
One
That
I've
Seen
Kicking
Around
Lately
Is
One
Called
Gold
Dune
W32
Gold
Dune
Or
I
Think
It
Might
Also
Be
Called
Honey
Bear
Every
Vendor
That
Comes
Across
A
Piece
Of
Malware
Always
Wants
To
Rename
It
Their
Own
Standard
So
Every
Virus
Has
12
To
20
Names
But
Gold
Dune
Is
Really
Interesting
When
It
Came
Across
My
Box
It
Was
Sent
To
Me
From
One
Of
Our
Buddies
At
A
Larger
Corporation
And
So
I
Loaded
It
Up
On
My
Dev
Box
And
I
Snipped
The
Traffic
And
This
Was
Interesting
Because
It
Used
FTP
And
It
Actually
Opened
Up
A
Connection
Back
To
The
Website
From
Whence
The
Malware
Actually
Originated
And
Logged
In
Over
FTP
As
Admin
And
Uploaded
All
The
Docs
From
That
Computer
To
Log
Files
So
There
Was
Thousands
Of
Log
Files
All
Sources
Form
Grabs
Every
Time
Someone
Who
Was
Infected
Was
Making
A
Post
On
Their
Browser
It
Would
Log
To
This
Website
But
What
Was
Really
Interesting
Is
Because
It
Logged
In
As
Admin
If
You
Snipped
The
FTP
Traffic
The
Password
Is
In
Clear
Text
So
You
Log
In
Using
The
Admin
Password
And
On
Top
Of
Staring
At
The
They
Could
Then
Steal
All
The
Data
Back
Or
Modify
The
Log
To
Make
Them
Unusable
Or
Delete
Them
Outright
Or
Better
Yet
Pwn
The
Website
To
Face
The
Fisher's
Website
And
If
One
Were
So
Malicious
They
Could
Even
Then
Upload
Their
Own
Customized
Variant
Of
The
Malware
And
Steal
The
Data
From
The
Fishers
Themselves
Using
Their
Own
Site
So
The
Software
So
Say
I'm
Jay
Random
Loser
And
I
Get
Owned
By
This
Every
Time
I
Post
To
A
Website
This
Spyware
Connects
Out
To
An
FTP
And
Uploads
My
Info
Correct
It
Just
Tags
It
In
Just
A
Fraction
Of
A
Second
So
And
It
Just
This
Doesn't
Sound
Like
The
Most
Efficient
Piece
Of
Software
I've
Heard
Well
No
I
Mean
If
You're
Giving
The
Client
Admin
Rights
To
Drop
Their
Docs
And
Something
Is
Kind
Of
Wrong
There
I
Couldn't
Believe
It
When
I
Logged
In
And
I
Had
Full
Access
To
Change
When
Your
Friend
Logged
In
Not
You
I
Logged
In
And
It
Took
Every
Ounce
Of
Restraint
In
My
Body
To
Not
Touch
The
Site
But
Of
Course
As
We
Know
It
Would
Be
Illegal
I
You
Know
If
Obviously
If
The
Malware
Itself
Is
Infecting
You
With
The
Password
It
Is
I
Know
I
cybercrime law, I'd really like
to do an episode or at least
pick your brain about the different implications
of access. I was listening to
Jennifer Granick, not to go off on a tangent
here, presented The Last
Hope 5, I believe,
and she was talking about how
technically, legally,
maybe wireless activity
that extends from your neighbor's house
and onto the sidewalk has no
expectation of privacy.
And so, technically,
legally, and no cases have been brought
forward to try this yet, but that if you are
accessing the network and using the resources
or what have you, you're not technically breaking the
law because it's not up to
you as the user,
as the Wi-Fi
war driver, to make
sure that the system is
not accessible from public area.
And so, you may,
if you're running an open access point and
someone commits a crime on it, you may end up
being the one holding the bag. You may not have
any legal recourse.
Of course, it's all, you know, legal theory
that's never been tested, so,
you know, don't do it, obviously.
All it takes is one angry judge, and you're like,
no, owned.
Yeah, and they'll
biber optic you, and you'll go away for a year
and a day for
being a martyr, you know, being the
person who will set the
legislation.
Free savant, woo!
Yeah, right, let's start the church now
while it's cheap.
Well, okay, not to continue
down this tangent. My personal
viewpoint is,
anything that passes
over onto my computer
via a wireless internet connection,
I have every right to look at it.
I can't transmit because
that'll intrude onto your internet
connection, and that's why I have
no rights. But if you're
transmitting data, that's
fair game.
So, like, if you're sniffing with
kismet in a promiscuous mode,
then, yeah, I agree, that should be
fine.
I think we briefly touched on that
in our ethics episode sometime in
season three, but, you know,
maybe there's enough material there
to revisit. It's definitely a
gray area, I mean.
I think we've definitely sent a
shout-out to someone who's
actually kind of versed in
cyber law to, you know, contact
us, please, but, and we've never
actually gotten a response, but
we'll send it out there again,
you know, come on, so, you know,
contact us. That'd be a really
cool episode.
Radio at binrev.com.
Yes, or, you know,
blackratchet of blackratchet.org
or savant at
fearchairs.com.
So, I mean, malware in the terms
of what it's designed to do, not
so much as how it does it, but
what it's designed to do is
pretty much uniform. It's trying to
steal your information, and
regardless of the various
variants, there are different
mediums that this malware will
go over. Perhaps it will allow
you everything over HTTP, or it'll
allow you everything over IRC, or
in the case of this golden
asinine bug, it'll go over
STP. But, um, so, from that
sense, we're pretty much looking
at the same villain, just with
different faces. So, although we
could spend an entire episode or
nine going into the myriad
variations of different types of
malware and how they
distinctly differ from each other
variation, I think, in general,
we're looking at, now, this is
what malware does, and that said
that we could talk about other
things like how to detect it, how
to find it, how to reverse
engineer it, how to avoid it. Um,
I think it's probably a good time
to segue into the next section,
because we could stay here all
night and talk about different
variations, but, you know, let's
get something a little bit more
interesting so that people who are
listening might be able to do some
research on their own.
All right, well, why don't we just
kind of, like, you know, I mean,
we're looking at our notes right
now, so how about, how do we, you
know, avoid this, or if, for
example, we wanted to find
something, some piece of
malware, how would, where would
exactly we be looking?
Well, one cool project that you
actually turned me on to.
Because technically the, yeah,
because technically the two were
kind of interlocked. I mean,
technically you'd say, well, how
should I, you know, what should I
do to avoid it is the same
question as, what do I need to do
to get it?
Right. Well, Microsoft had a
really interesting project. What
was it called? MonkeyNet or
HoneyMonkey or something along the
lines that basically simulated a
million monkeys and a million
web browsers traversing the
entire internet. And they may end
up making the incomplete words of
Shakespeare. We don't know about
that yet. But basically what it's
doing is surfing the shadier parts
of the internet, like the
prawn sites or the fly-by-night
poker, overseas poker sites.
Basically, any time you get a
feeling in the back of your head
like, hey, maybe I shouldn't do
this or I could get fired from
surfing this website at work,
there's a very good chance that
there's probably malware in there
somewhere looking to exploit the
latest browser vulnerabilities or
trick you into clicking the link.
Another really popular one are the
cracks sites for wearers.
Like, pretty much off the
lavista.box.sk in its entirety is
crawling with malware. I'd highly
recommend not going there unless
you're wearing a condom and have
your viruses up to date, your
antivirus signatures.
And then another project that you
turned me on to is called
Nepenthes or Nepenthes.
It's N-E-P-E-N-T-H-E-S.
How do you pronounce it?
I pronounce it Nepenthes.
Nepenthes.
Okay.
I'm on the same boat as you are,
just because I have no clue.
But I believe the website is
N-E-P-E-N-T-H-E-S dot S-F dot
net, because I think it's a
Source Forge project.
Oh, please.
And it's actually named after a
carnivorous plant that lures flies
into its belly and devours them
slowly like the great sarlacc.
Oh, really?
See, I didn't know that.
I knew it was some type of, you
know, plant, but I didn't actually
know about that.
Yeah, and I'm actually considering
getting some of these, because
there's a lot of flies here at the
beach, and, well, I mean, if I have
a plant that kicks more ass than I
do, then that's something.
So, anyways, what Nepenthes does is
it simulates the Windows kernel on
and several vulnerable port services.
It's basically like a honey net that
sits on your box and simulates
several known exploits that worms
and the various viruses are looking
for, and they're constantly probing
and pinging the Internet for it, and
allows the virus to think that it
has successfully penetrated the
system and jails it, and then
downloads any binary that it's trying
to push to you or keeps traffic logs
of anything that the malware is
trying to, or is actually executing,
and that allows you to capture it in a
sterile environment and then analyze
as you like.
How's your install coming along?
I've only caught two versions of
my boot.
I actually have no clue right now.
Hold on, let me go fire over here.
You continue talking.
I'll look at my bit bucket.
So, to give you an idea of how this
works, Black Ratchet and I both have
Nepenthes installed on our systems.
I believe yours is on your home box as
well, or at least your home network?
Actually, no.
Mine's on a co-located box.
Oh, okay.
Well, maybe that's why you're getting a
bit more results than I am.
I'm running mine off of my homeland using
Cox as an internet provider, and I haven't
seen that much traffic.
I've been running it for about a month
now, and I've caught two variations of
the MyDoom worm, and when I reverse
engineered them, the sites that they
tagged have been long since taken down.
This is basically a ghost in the machine
that's been echoing around via Windows
95 unpatched boxes and keeps transmitting
itself, but isn't really effective anymore.
Just to give you kind of an idea, when
you're sitting with a box exposed on the
DMZ out on the internet, unpatched or
pretending to be unpatched, then you can
download these files and execute them
and infect yourself, but they stay around
on the internet.
As long as that last unpatched host is
still online, then it's still going to
try and keep replicating itself, and so
it's safe to assume that these things may
never actually go away.
Which is exactly, getting back to the
morse worm, which is exactly what he
wanted to do.
He wanted to have something that would
never go away.
And technically, his vision has been
realized.
I just looked at my drop bucket, and
there's a lot in there.
It's 48.
Wow, that's pretty good.
I think I've only, hold on, let's go.
I forget how long I've been running
this, because I think it's only been a
couple of months.
Let's see, August.
August or so.
August, July.
Yeah, a couple months.
And those results are...
About three months or so.
Now, correct me if I'm wrong, but that, to
run the penthes, you have to open up
ports and basically allocate them, those
services on your firewall or on your
NAT, to just that box.
So if you're simulating an FTP server,
you're simulating a web server, then
that pretty much takes that IP address
out of commission for being able to run
actual services on that.
Yes.
Like, for example, I run on this box is a
web server, and I run a mail server on it,
and there's a couple of things.
So, like, you know, Nemesis, or whatever,
however you pronounce it, is by default
supposed to be, was configured to listen
for these ports.
And I just had to say, you know, don't
listen to those ports.
I'm actually doing it.
I'm doing something on these ports.
Don't try to connect to them.
But, like, as for, like, Windows file
sharing, I'm running a Linux block on
the Internet.
Who the hell would run Windows file
sharing on a Linux block on the
Internet?
No, there's an episode in and of itself,
but yeah, I hear you.
See, that's really interesting, is that if you
have those valid listening services on those
ports, you're not running Nemesis to its
fullest potential.
And conceivably, there might be even more
malicious traffic on the network that
we're just not seeing because we need to
have legitimate traffic going through.
Well, hopefully in a couple of months,
I'll be getting a better DSL connection
with a couple of static IPs.
So I'll have something where I can just
run a Honeynet and a Honeypot and just
see what the hell it goes on to with it.
So here's hoping.
Oh, yeah, it's interesting that when you
bring up Honeypots, the Honeywall project
is another really good virtual environment
that allows you to infect yourself.
And they will not run together, is what I
understand, that people have been trying
since the Penthes came out to modularly plug
the Penthes into Honeywall.
And based on various configurations or how it
works, it's that you can't run both in the same
box at the same time on the same thing.
I've never actually heard of the Honeywall one.
Do you know the website for that?
God, I hope I'm not talking out of my ass
here.
Okay, how about this?
How about you talking about Honeynet?
Or HoneyDee?
Yeah, I'm talking about HoneyDee.
That's what it is.
It's about a new...
Well, Honeywall CD...
Okay, Honeywall is the CD-ROM live CD version
of the Honeynet project available on Honeynet.org.
That's actually pretty cool.
So I believe that they're the same.
It's not that it's the exact same thing,
but they're very similar.
Could be.
I don't know.
I've never heard of Honeywall before,
so that's why I was kind of confused.
That's actually something I need to check out.
Might have to do a couple dry runs with that
and see how that fancies us.
Hell yeah.
All right, so this takes a lot of the stuff
that would come out and find me,
so what else can I do, too?
Okay, well, once you've got the malware,
so you've got this nice, happy collection
and you're sitting on about 40 pieces of malware,
if you have the cache and you want to set up
a VMware system or...
And I know not very can correct me on this
because you did the virtualization episodes.
I believe that the server version of VMware
is actually free.
I'm not certain on that.
There's two types of stuff.
There's VMware Server,
which really I don't think it provides
direct interaction.
I haven't really played with it
because I don't have the hardware for it.
And there's also VMware Player,
which is a way of, like, you know,
you can download, like, Linux images off the Internet
and have a completely working Linux system
within a virtual process.
And there's also ways of...
They don't actually officially approve of this
because that actually eliminates a lot of their market,
is you can grab a file
that makes it look like a VMware disk image
and then install Windows on it.
Okay.
So you'd have Windows.
So I guess the bottom line is
pick your favorite virtualization method,
be it, you know, a MacBook with parallels running
and a snapshot system.
But what you can do is set it yourself up
with a toolkit.
Whenever I install a Windows image
for using some malware analysis,
there's a couple things I'll put on there.
I will always put on Process Explorer
from System Internals.
I will put on WinPooch.
WinPooch is a sweet program.
They pull up the address for that real fast.
Basically, what it does is it monitors,
it sits in your system tray
and monitors all attempts from your computer
to either connect to the Internet
or accept incoming connections
or drop files into a system directory
or make hooks to the registry
or make browser helper object hooks
is on WinPooch.free.fr.
And if you run it,
it's got this cute little cowboy dog image
that sits in your tray
and it barks at you every time
something tries to affect your system.
So...
So that's all about the cute mascots.
It's all about the cute mascots.
No, seriously, check it out.
WinPooch.free.fr.
There's a little guy sitting in the banner.
But anyway,
so you infect yourself with this malware
on the virtual machine.
WinPooch will bark at you
and bring up a little menu saying,
would you like to approve,
accept,
or reject this process?
And you can approve or accept it
because since you're running a snapshot,
it's not going to save the settings anyways.
But what you want to do
is actually allow this malicious software
to affect your system.
And then meanwhile,
run Wireshark on an adjacent system,
you know,
over an ARP switch hub
or a switch
and snip the traffic.
And you can run filters through Wireshark
and actually get just the traffic
from this box
and have a verbatim transcript
of what it's doing.
And then you can just crawl
through the packet capture
and see the password,
see the login,
see the sites that it looks up.
What I'll usually do
once I've infected myself
is load up a webpage for a bank,
like bankofamerica.com.
And then log in
with obviously bogus characteristics
like username test,
password test.
And then you watch the packet capture
and more often than not,
it will go out
and tag a server,
usually in Russia, Romania,
or one of those shady countries
on the internet,
or excuse me,
the shady websites
that are inhabited
in Eastern European countries.
I don't want to get any hate mail for that.
I don't want to piss anybody off.
So I have nothing against those countries,
just the people that give them a bad name.
Anyway.
It'll ask,
yeah,
thank you.
So it will make,
it will post this data
to a PHP,
you know,
cookie jar,
so to speak,
and then just quietly
go about its business.
And it happens so damn fast
that you really wouldn't notice
without running a packet capture
that it was going on.
So once you've got that,
you can take the log
from Winpooch
and you can see
exactly which hooks
it's dropping,
which file names
it's injecting
into the system.
And if you by chance
happen to stumble across
some zero-day malware,
then you might be
one of the first people
to be able to put together
all this information.
You package it up
with the binary
and you put in
the password zip file
and you can send it
to Symantec
or your favorite
Davey vendor of choice.
And you can actually
get in on the ground floor
of identifying
and cataloging
this malware.
And get your name up on left.
Yeah, yeah.
And become famous.
They may even send you
into space.
Who knows?
And Rod, we trust.
Yep.
So, I mean, dude,
I know you're active in this.
How often do you have
this kind of setup
going on here?
Well, it varies by week,
but some weeks
we'll be doing nothing but
and sometimes it'll just be
once or twice a week.
But we get a pretty steady
influx of malware
coming our way.
Now, we talked about
briefly that Loser Savant
sent an email
talking about how
there are certain
variations of malware
that check to see
if they're being run
in a virtualized environment.
I don't know how
running Windows
in parallel
on a MacBook
would interact
with this malware,
but basically what it does
is it checks to see
if it's running
in a virtual session
through a debugging
process or whatever.
And if it senses that,
it will cripple itself
and not give you
any useful information.
And because of this project,
Joe Truman
over at SecureWorks
a.k.a. Lurk
created Truman,
the malware analysis system.
And basically what it does
is using two boxes
connected with a crossover
cable and a live CD,
it runs a virtual image
of Windows,
infects itself,
disks the registry,
disks the image
to itself,
grabs, you know,
makes note of all the changes
and actually emulates
the entire Internet
on this other box.
So you've got your boxes
being infected,
we'll call that the client.
And then you've got
the pseudonet,
the Truman box,
which is the Internet,
and it will actually
basically pander to
and placate the malware
into believing
that it is actually
connected online
to a live system.
But since this data
never actually touches
the malicious servers,
then you could,
if you were stupid enough
or so inclined
or had other reasons to,
you could put real information
into the malware
and it would never be seen
by the bad guys in theory.
So that's probably
a good way to go.
And it is free.
So if you get a chance,
go back to the tiny URL
we mentioned earlier
one more time
in case you weren't listening.
That was...
tinyurl.com
slash November 7
Echo Delta Victor.
Thank you.
Man, you're really good
at that,
those radio classics.
I can never get those.
You're amazing.
Well, I have a story
about that,
but I'm not going to go
into it on air personally.
Okay.
It's about Mrs. Ratchet,
so I'm just not going there.
Oh, yeah.
You don't want to go there
on the air, my friend.
Not unless you want
there to be
actually Mrs. Ratchet.
Mrs. Hacks Rancher.
The stank dog.
Oh!
If you like the guys
that know how to hack,
what can I say?
What can I say?
So,
and I'm sure there's probably
some other really clever ways
of analyzing malware
and now,
my code foo sucks.
I'm not a programmer.
There's a lot of you
who could say,
well,
why don't we just load it
into AliDebug
or into IDA Pro
and just disassemble it
and see what it does.
You know,
if you can do that,
sweet.
Actually,
more appropriately,
if you can do that,
shoot an email
to mentorship
or mentor
at binrep.com.
Is it mentorship?
I don't know.
Anyway,
talk to Verbal
and basically say,
hey, yeah,
I know how to do
this assembly
and I'd love to
take on some mentors
because I would love
to be tutored
in specifically
how people are doing that
because what I'm doing
right now
is kind of a black box test.
You know,
it's put in an isolated
environment
and then see the effects
of what it does.
But I'm sure
there are better ways
to do it.
I'm sure there are.
Yeah.
So,
I guess we should talk
about how to not get malware
now that we've talked
about how to get it.
Yeah.
Well,
for starters,
don't use peer-to-peer.
Don't use kazaz.
Yeah,
I know.
It's crazy.
I hope you're sitting down.
I've probably offended
a lot of people.
No,
seriously,
don't use peer-to-peer.
If you need your wares
or your files,
there are other safer places
to get them.
I'm not going to go
into them here.
It's beyond the scope
of the show
and I don't want
to lose my job.
But just stay away from it.
I can't tell you
how many days
or hours
or whatever
I've spent
debugging
friends' computers
and getting the malware
out of there.
Well,
so let me ask you,
are you using kazaz?
Yeah.
Are you using,
you know,
Big Bear
or whatever the hell
those other...
Share Bear,
Share Bear.
Thank you.
Share Bear.
Thank you.
Yeah,
just don't use them.
You know,
I mean,
if it's that important
to you to get
Britney.mp3,
just get it
from a friend.
You know?
Well,
Savant has a large
connection to Britney Spears
MP3,
so if you want to just...
Oh,
you're not supposed
to mention that?
Put that in the
subject line for the emails
and I'll see what I can do.
keeping in mind
that you're receiving
files from someone
who deals primarily
in viruses,
malware,
and phishing attacks.
So,
you know,
that said,
I feel like that's
a viable CYA.
Okay,
okay,
and then we mentioned
Oslo Vista,
any of the Haxor sites
or anything that purports
itself to be...
I don't want to say
lead because then people
can turn around and say,
oh,
BinRev is a malware site.
No,
no,
BinRev is not a malware site.
We told you not to mention that.
I know.
Can you edit that out?
I guess you're going to have to.
I'm talking about the poker sites,
the free prawn,
the iPod video,
you know,
sign up five people
and get a free iPod site.
It's basically,
if it's too good to be true,
you're probably owned.
You know,
it's a clue.
We're going to segue
from that for a second.
I was sitting in my car
the other day
and I was waiting for...
I got off the commuter rail,
which is how I get
into town every day,
and I'm sitting there,
you know,
listening to my,
you know,
I think it was
a local sports station
because it was,
you know,
they're talking about
the Patriots
and the Patriots are playing
and I'm big into football.
I'll admit it.
And there's a radio ad
and it's for
FreeXbox360.com
and I was just like,
oh no.
And sure enough,
the guy was like,
oh yeah,
you know,
just download this stuff
and we'll fill out this form
and we'll send you
a free Xbox 360.
And I was like,
oh,
I can't believe
they've made the jump.
Yeah,
well,
we'll probably start seeing
friggin' TV commercials
for it too.
I'm sure there will be.
You know,
all those commercials
or like
recent proliferation
not to get too far off topic
but of the text message sites.
You know,
text message,
I am dumb
to 91672
for free hot
SMS sex chat.
Really?
Oh,
I was about to do that.
You know,
which on another
completely unrelated side,
I feel like we should
probably get in
on the ground floor on
because if people
are paying money
to be teased
over SMS,
then I feel like
we could write
a Pearl script
and just watch
the money roll in.
We're going to hook up,
you know,
a sex-alizer.
I mean,
yeah,
exactly.
I don't exactly have
a phone sex voice,
at least,
you know,
not for deuce.
There might be
a woman out there
that actually uses
phone sex,
but I digress.
But with Pearl,
you know,
it takes all the
gender out of it.
So maybe
if this security thing
doesn't work,
Gal,
we could get into
that record.
People are sending
like,
you know,
10 cents a pop
for an SMS message
creating sex.
I mean,
how do they,
know that it's a girl?
I mean,
it'll just be like
IRC,
you know,
where the men
are boys
and the women
are men.
You know,
and if you could
determine like
an algorithm
to find out
when the person
texting you
is at their
peak moment
of SMS enjoyment
right before
they are,
you know,
all about it,
you know what I'm
getting at?
Then you could
suddenly,
you're like,
okay,
now if you'd
like to continue
this orgasm,
please deposit
$2.99
for each
additional text
message.
That'd be the
time to extort
them,
right?
You know,
because you're
going to take
them all in.
Oh my God,
okay,
I'm going to
stop ranting
about this.
I thought it
was funny,
but God,
I just bought
myself another
month on the
couch.
You're a shrewd
businessman,
Savant,
you're a shrewd
businessman.
What can I
say?
I've got to
make that
dollar.
Okay,
so what else?
Use Mac,
oh God,
that hurt me
so much to
say,
but you look
at statistics,
right now,
Mac,
they're not
really infected
with the
malware problem.
Now,
a lot of
people tell
you that's
because Mac's
better or
whatever,
and I'm
still holding
on to the
belief that
it's a return
on investment
issue,
that 90%
of the users
out there
are running
Windows
systems,
and so 90%
or 100%
of the malware
is going to
try and cash
in on that
demographic and
be specific to
Windows.
But,
I mean,
like you
pointed out,
the last
Mac viruses
tend to have
died out a
long time
ago,
save for
the occasional
local root
exploit for
OSX that
gets patched
up and
updated relatively
soon.
I'm personally
of the opinion
that it is
return on
investment.
I mean,
you can
write a worm
for these
remote root
holes,
and you
can do it,
it's just
who wants
to?
Right.
I mean,
I do,
but...
Well,
besides
someone
who has
a deep
hatred
of Mac,
it's just
no,
no.
No,
and it's
not even
Macs
themselves,
it's those
fucking
commercials.
Hey,
I'm a
nerdy fat
guy with
glasses
wearing a
suit,
so I
must be
PC.
Oh,
I'm the
cool
Jimmy Fallon
lookalike
guy,
so I
must be
Oh,
those
commercials
piss me
off.
Oh,
my God.
And it's
a smug,
satisfactory
look on
that guy's
face that I
just want to
punch right
off his
goddamn face.
You hear me?
If you're
listening to the
show,
and I
certainly hope
you're not,
I'm coming
for you.
Yeah,
I'm ranting
at it.
Let's hope
you're not in
Southern California.
Yeah,
yeah.
But you probably
is,
actually.
Yeah,
probably.
But I
mentioned that I
actually just
moved to
Verbal's house,
so if you
want to come
find me,
then you
should go
through
Verbal.
Yes,
totally.
Yeah,
that's it.
So,
okay,
let's back
off the
Mac a little
bit.
I guess
you could
say,
you know,
use Linux,
because it
also doesn't
suffer from
the level
of malware
infections.
Of course,
you and I
can both
attest to
the fact
that running
Linux by
no means
makes you
safe,
because there's
a lot of
bad Linux
admins out
there who
are just
asking to
get owned
anyways.
In a lot
of cases,
it's easier
than actually
getting someone
to run
an infected
file.
It's not
even that.
I mean,
you see
stuff,
I mean,
you actually
turned me
on of
saying,
well,
this is
a Romanian
skiddy
channel,
and they're
just sitting
out there,
and they're
creating botnets,
and it's all
Linux boxes.
There's Linux
boxes and
badly
admined
Unix boxes,
and I'm
like,
whoa.
It's like,
you see
15 different
egg drop
bots show
up within
a two-minute
period,
and it's
all from
a certain
ISP,
and I'm
like,
ooh,
okay,
yeah,
I think
someone
wasn't up
to date
on their
patch.
You know,
I've probably
seen easily
5,000 to
10,000
infected Linux
bot clients,
and I've
probably only
seen,
in IRC at
least,
I've only
seen two
to three
infected
Windows boxes,
which shocks
the hell out
of me,
but it's
true,
and not
only that,
but the
few that we
did see
that were
Windows
were running
SigWit,
like the
malware had
actually packaged
SigWit
into the
binary,
and so,
I mean,
essentially,
they just
converted IR
offer and
egg drop to
run on
Windows via
SigWit,
so,
I mean,
I guess the
root of the
problem there
isn't even a
Windows problem.
Well,
it's different
attack methods.
I mean,
you know,
you have the
badly patched
Linux box,
but at the
same point,
Windows has,
like,
you know,
bad security
internally,
so you can
just have it,
oh,
you know,
pop up a
website with
an iframe
going to
some nasty
thing,
and it'll
install it
automatically
because it's
a web
browser
for you,
so it's
just,
it's different
problems.
So,
that said,
how else do you
stay away from
malware?
Don't let your
friends who
aren't necessarily
geeks use your
computer to check
their MySpace
page.
I don't know if
this is an actual
worm,
but recently I've
seen a bunch of
my friends posting
ads on their
profiles and their
blogs saying,
hey,
check out this
new site,
it's way better
than MySpace
in the title,
and then there'll
be a random
string of
characters after
that subject
line,
so it'll be
like,
hey,
switch to
this site,
Q9FDR47,
which leads me
to believe that
their accounts
have actually been
owned and they're
being reposted
without their
knowledge.
So,
stay away from
MySpace,
too.
My parents got
owned.
Yeah,
my parents got
owned,
and actually I
have to go up
there tomorrow,
which for those
of you who
aren't listening to
this,
we've been
listening to
this on
Tuesday,
I'd have to
be actually
done there
up on
Sunday,
so,
yeah,
I've got to
go up there
and clean
their computer,
they've got
some type of
nasty infection
of something.
And I'm
sure it's just
someone,
I'm sure it's
them going out
to some
website that
they mistyped
or something.
That was it.
Definitely not
looking at poker
from...
Don't do
typing.
You know,
they meant
to log
into
hotmail.com
but accidentally
logged into
slathering
greasy
mails.com.
No,
my personal
favorite is
hotmail.com.
M-I-A-L.
H-O-T-M-A-L-E.com
too,
hotmail.com.
Yeah,
don't go to
that link
because if
now we're
saving on the
main page
for that link,
there's a lot
of nefarious
activity going
on.
So,
I mean,
if you're at
work,
why are you
listening to
the show?
And definitely
don't go to
the link.
All right.
Yeah.
All right.
So,
I mean,
to stay away
from...
I mean,
if you really
want to just
get away from
malware in
general,
here's what
you need to
do.
Just,
you know,
encase your
computer in
concrete and
drop it off
the edge of
here because
you're never
really going
to get away
from it.
Get away
from it
totally.
But,
you know,
hopefully you're
just going to
be safe and
just,
you know,
here at
BinRovery.
And like,
yeah,
I was saying
on the last
episode,
if you're
running your
primary operating
system out of
a virtualized
machine and
you've got a
snapshot of a
safe state,
preferably with
patches all up
to date,
then even if
you do get
infected with
malware,
you just go to
snapshot,
reload snapshot,
and you're
good to go
again.
So,
there's something
to be said
for that.
Yeah.
But that's a
bit...
Yeah,
I mean,
it's a hard
way to do it.
Yeah.
Totally.
Do it.
Go for the gold.
I'm told.
Neither do I,
so that's why
I kind of
dismiss it.
Yeah.
Anyway,
announcements.
I don't think
we have any
announcements.
I mean,
besides,
you know,
have a happy
Halloween and
don't eat the
candy with the
razor blade in
it or something.
I don't know.
Yeah.
Shouts.
My shouts,
I want to say
shouts out to
Snake Dog,
Troops,
Verbal,
everyone in
Pound,
Bin Rev.
I don't know
who else.
People I'm
probably forgetting.
I haven't done
shouts in a while.
Well,
keeping with the
grand team of
Bin Rev Radio,
I have a few
shouts to my
dog,
Natus.
Natus,
you're my
boy.
Stank and
everybody else
you mentioned.
And also,
specific shouts
to my local
friends,
Maestro and
Vicarious,
who are long-time
listeners of the
show and big
fans.
They just hang
out in the
background and
don't actually
contribute.
So,
big ups,
guys.
Thanks for
the support.
Dude,
they should
totally get on
here.
We can have a
race and
talk about
social engineering
men at the
bar.
Yeah,
there's probably
something there.
That works.
Our site of the
week,
I was looking up
botnets on
Wikipedia and
I came across
this diagram of
how a botnet
works.
And it's
tinyyearold.com
slash
Y-A,
I'm sorry,
Yankee
Alpha
Juliet,
Quebec
Zoo
Mike.
Just,
yeah,
I'm
wheat like
that.
Hey,
it gets the
point across.
Everyone knows.
It's a brownie
face with an
eyepatch on.
It looks like
the logo from
Hackers.
Awesome.
Oh,
it's hilarious.
And if you
actually go to
the Botnet,
I mean,
it's all like,
you know,
step one,
step two.
If you actually
go to the
botnet article
and read it,
you'll actually
find out what
all the steps
are.
But I just,
the frowny
faces and the
sick faces,
and is this
like,
oh my god,
who designed
that?
Oh wow,
it does.
Oh!
No,
no,
I think it's
that savant.
Ah,
no.
Yeah,
I just said
that.
Yeah,
owned.
Anyway,
our email,
as always,
is radio
at binrev.com.
I don't see why
we announce
that every show.
I mean,
hopefully people
would catch
on to it
after a while.
I just went
there.
I just
insulted our
audience.
Considering
tonight's
Halloween,
I picked
a very
interesting
closing music.
I think
this is
the first
for Binrev
Radio,
and I'm
going to
completely
butcher the
title,
because I
believe it's
in German.
It's
Toccata
and Figu
in D
Minor,
and those
of you
who have
no clue
what the
heck
that is,
you'll find
out in a
moment,
because you
know this
song.
Everyone's
heard it.
Yeah,
everyone's
heard it.
So anyway,
I think that's
it.
Yep,
I think that's
it.
All right,
so as
always,
we'll see
you next
week.
Same
hack time.
Same
hack
channel.
real
show
beautiful
ago.
...
THE END
Thank you.